Lucene search
+L

27 matches found

CNNVD
CNNVD
added 2026/04/15 12:00 a.m.16 views

Slah CMS 安全漏洞

Slah CMS is a content management system developed by the Brazilian company Slah. Versions of Slah CMS prior to 1.5.0 contain security vulnerabilities. These vulnerabilities stem from defects in the session function located in the config.php file, which may lead to remote code execution...

9.8CVSS6.1AI score0.00515EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/04/15 12:00 a.m.15 views

Slah CMS 安全漏洞

Slah CMS is a content management system developed by the Brazilian company Slah. Versions of Slah CMS prior to 1.5.0 contain security vulnerabilities. These vulnerabilities stem from improper access control in the config.php component, which may allow unverified attackers to access sensitive...

7.5CVSS5.8AI score0.00254EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/15 12:00 a.m.8 views

CVE-2026-30994

Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active session credentials...

7.5CVSS5.8AI score0.00254EPSS
SaveExploits0References3
CVE
CVE
added 2026/04/15 12:00 a.m.22 views

CVE-2026-30994

CVE-2026-30994 affects Slah CMS. Affected component: the config.php module in Slah versions v1.5.0 and below . The issue is described as incorrect access control, allowing an unauthenticated attacker to access sensitive information, including active session credentials. Across multiple connected ...

7.5CVSS5.8AI score0.00254EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/04/15 12:00 a.m.33 views

CVE-2026-30994

Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active session credentials...

0.00254EPSS
SaveExploits0References2
CVE
CVE
added 2026/04/15 12:00 a.m.24 views

CVE-2026-30995

Slah CMS

8.6CVSS5.9AI score0.00226EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/15 12:00 a.m.4 views

CVE-2026-30995

Slah CMS v1.5.0 and below was discovered to contain a SQL injection vulnerability via the id parameter in the vereadorver.php endpoint...

8.6CVSS5.9AI score0.00226EPSS
SaveExploits0References3
Rows per page
Query Builder